[25.04 FEAT] libzpc: support protected key derived from Secure Execution retrievable secrets

[bugproxy]

Feature Description:

Extend libzpc to support a new key class: SecEx retrievable keys that can be retrieved from the ultravisor as protected keys.
So instead of a secret key objects the keys of this new key class need to a reference to the respective secret identifier to obtain the according protected key.

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2025-02-06 08:34 EDT-------
This item requires patches on top of libzpc v1.2.0

We already have a pull request for this item open, but are still reviewing.
We are trying to get this upstream in the next couple of days.

[Frank Heimes (fheimes)]

Thanks for the update.
I'm seeing a lot of patches that are in master on top of 1.2.0
(https://github.com/opencryptoki/libzpc/commits)
so would it be possible to tag a new version that we can more easily upgrade to?

[Frank Heimes (fheimes)]

Looks like we are close to a new version 1.3.0:
https://github.com/opencryptoki/libzpc/pull/21

[Frank Heimes (fheimes)]

https://github.com/opencryptoki/libzpc/releases/tag/v1.3.0

[bugproxy (bugproxy)]

------- Comment From <email address hidden> 2025-02-10 05:45 EDT-------
This feature has been included in the brand new libzpc v1.3.0 which was released last week.
Can you please do a version bump to v1.3.0 to get the feature into Plucky?
Thanks

[Frank Heimes (fheimes)]

Thx Boris - yes, we plan to bump the version to latest.

[Alexandre Erwin Ittner (aittner)]

debdiff attached with the version bump and an upgraded Standards-Version (to 4.7.0). A full package is also available from this PPA https://launchpad.net/~aittner/+archive/ubuntu/lp2097545-plucky2

lintian shows no warnings. No changes to symbols needed.

[Dan Bungert (dbungert)]

Reviewed for sponsorship purposes.

I request that `update-maintainer` be run on the package for the next upload. https://wiki.ubuntu.com/DebianMaintainerField has details. Not an big deal in this case as it lists Frank as the maintainer, but still a good convention that I'd like you to follow.

Please regenerate the diff with that change and I'll be happy to upload.

[Alexandre Erwin Ittner (aittner)]

Thanks @dbungert ! I'm sending a new debdiff with the changes.

[Dan Bungert (dbungert)]

Uploaded

[Launchpad Janitor (janitor)]

This bug was fixed in the package libzpc - 1.3.0-0ubuntu1

---------------
libzpc (1.3.0-0ubuntu1) plucky; urgency=medium

  * New upstream release (LP: #2097545)
  * d/control: upgrade Standards-Version from 4.6.2 to 4.7.0.
  * d/control: Update Maintainer field to "Ubuntu Developers".

 -- Alexandre Erwin Ittner <email address hidden> Fri, 14 Feb 2025 16:52:54 +0000